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DETAILED ACTION 

1 . This action is in reply to applicant's correspondence of 22 March 2005. 

2. Claims 1-26 are pending for examination. 

3. Claims 1-26 are rejected. 

Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1-5, 7, 9, 11-15, 17-19, 21-25 and 26 are rejected under 35 U.S.C. 102(b) as being 
anticipated by McCoy et al, U.S. Patent No. 6,018,739. 

5. As per claim 1 ; "An identity management system to authenticate the identity of an 
individual, comprising: 

a vetting workstation 

to verify the identity of the individual and 

generate identification data [Abstract, figures l-3t and associated descriptions, 
whereas the distributed biometric identification system inclusive of a centralized (and 
associated databases supporting the various workstations/client functions) server over a 
wide area network (i.e., the Internet), and more particularly, the workstation utilized as 
part of the subject (i.e., INS identification of individuals of targeted interest, inclusive of 
(col. 1, lines 5-33) travelers, visitors, etc.,) biometric capture/administrative database 
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management (identity capture/verification) system, clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.]; 
an enrollment workstation 

to enroll the individual whose identity has been verified, 

to issue an identification token, and 

generate identification data [Abstract, figures l-3t and associated descriptions, 
whereas the distributed biometric identification system inclusive of a centralized (and 
associated databases supporting the various workstations/client functions) server over a 
wide area network (i.e., the Internet), and more particularly, the workstation utilized as 
part of the subject (i.e., INS identification of individuals of targeted interest, inclusive of 
(col. 1, lines 5-33) travelers, visitors, etc.,) biometric capture/administrative database 
management (enrollment, whereas after enrolled, the system verified and issued 
identification to the database constitutes a token data object) system, clearly encompasses 
the claimed limitations as broadly interpreted by the examiner.]; and 
a core system 

networked with 

the vetting workstation and 
the enrollment workstation 

to provide 

a central clearinghouse for the storage and 

exchange of identification data [Abstract, figures l-3t and associated 
descriptions, whereas the distributed biometric identification system inclusive of 
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clients, server(s), databases supporting the various workstations over a wide area 
network (i.e., the Internet), and more particularly, the workstation utilized as part 
of the subject biometric capture/administrative database management (client 
requested database access to ' . . .a central clearinghouse . . . ') system, clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.].". 

And further as per claim 11, this claim is the method claim for the apparatus (system) 
claim 1 above, and is rejected for the same reasons provided for the claim 1 rejection; "An 
identity management process for authenticating the identity of an individual, comprising: 

pre-enrolling the individual in an identity management system by collecting personal 
information submitted by the individual and storing the information in a database; 

vetting the individual by authenticating the personal information through at least one 
database of at least one of law enforcement, government and background checking 
organizations; 

enrolling the individual into the identity management system; comparing personal 
information collected during pre-enrolling to data collected during enrolling; 

vetting the individual by conducting at least a background check of the individual; and 
issuing an identification token to the individual.". 

And further as per claim 21, this claim is the embodied software claim for the apparatus 
(system) claim 1 above, and is rejected for the same reasons provided for the claim 1 rejection; 



Application/Control Number: 10/665,419 Page 5 

Art Unit: 2136 

"A computer usable program embodied on a computer usable medium having computer readable 
program code means, comprising: 

pre-enrolling an individual in the identity management system by recording personal 
information submitted by the individual; 

enrolling the individual into the identity management system; 

vetting the individual by authenticating personal data through the query of a plurality of 
databases including law enforcement, government and background checking organizations; and 
issuing an identity token to the individual.". 

6. Claim 2 additionally recites the limitations that; "The identity management system of 
claim 1, further comprising 

a security check workstation 

to validate the identity of the individual at a facility using 

the identification token, and 
to record identification data, wherein 

the core system is networked with 

a security check workstation.". 
The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (security check workstation 
validation utilizing the identification token object and associated individual biometric fingerprint 
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capturing/comparison), clearly encompasses the claimed limitations as broadly interpreted by the 
examiner.) suggest such limitations. 



And further as per claim 15, this claim is the method claim for the apparatus (system) 
claim 2 above, and is rejected for the same reasons provided for the claim 2 rejection; "The 
identity management process of claim 1 1 , further comprising 
conducting security checks at least one location using 
a security workstation 

by at least one of 

scanning the identity token of 

the individual, 
verifying biometric data of 

the individual and 
querying the core system for 
identity data.". 

And further as per claim 25, this claim is the embodied software claim for the apparatus 
(system) claim 2 above, and is rejected for the same reasons provided for the claim 2 rejection; 
"The computer program of claim 21, further comprising 

conducting security checks at various locations using 

one or more security workstations by at least one of 
scanning the identity token of 
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the individual, 
verifying biometric data of 

the individual and 
querying the core system for 

identity information.". 



7. Claim 3 additionally recites the limitations that; "The identity management system of 
claim 1, further comprising 

a check-in workstation for 

checking-in individuals possessing the identification token, 

wherein 

the core system is networked with 
the checking workstation.". 
The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (check-in workstation 
utilizing the identification token object and associated individual biometric fingerprint 
capturing/comparison), clearly encompasses the claimed limitations as broadly interpreted by the 
examiner.) suggest such limitations. 
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And further as per claim 14, this claim is the method claim for the apparatus (system) 
claim 3 above, and is rejected for the same reasons provided for the claim 3 rejection; "The 
identity management process of claim 11, further comprising 
checking-in the individual at a location 
by at least one of 

scanning the identification token of 

the individual, 
verifying biometric data of 

the individual and 
querying the core system for 
identity data.". 

And further as per claim 24, this claim is the embodied software claim for the apparatus 
(system) claim 3 above, and is rejected for the same reasons provided for the claim 3 rejection; 
"The computer program of claim 21, further comprising 
checking-in the individual by at least one of 
scanning the identity token of 

the individual, 
verifying biometric data of 

the individual and 
querying the core system for 
identity information.". 
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8. Claim 4 additionally recites the limitations that; 'The identity management system 
described in claim 3, wherein 

the check-in workstation is 
an automated kiosk.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (check-in workstation 
utilizing the various remote (i.e., col. 5,lines 31-56) location configurations), clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.) suggest such 
limitations. 

9. Claim 5 additionally recites the limitations that; "The identity management system 
described in claim 1 , further comprising 

a dispatch workstation 

to allow tracking of an individual with respect to the facility, 
to verify the individual's employee status, and 
to verify that the individual has a need to 
access certain areas of the facility, 
wherein 

the core system is electronically connected with 
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the dispatch workstation.". 
The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (dispatch workstation 
inclusive of validation of individual access rights with respect to a facility, INS related employee 
status aspects, etc.,), clearly encompasses the claimed limitations as broadly interpreted by the 
examiner.) suggest such limitations. 

10. Claim 7 additionally recites the limitations that; "The identity management system 
described in claim 1, wherein 

the core system is electronically connected with 

the vetting workstation and 

the enrollment workstation 

using 

a secure connection.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet, whereas inclusive of SSL, IPSec (the WEB secure 
communications aspects), etc.,), clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.) suggest such limitations. 
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11. Claim 9 additionally recites the limitations that; "The identity management system 
described in claim 5, wherein 

the core system is networked with 
the dispatch workstation 

using 

a secure connection.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet, whereas inclusive of SSL, IPSec (the WEB secure 
communications aspects), etc.,), clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.) suggest such limitations. 

12. Claim 12 additionally recites the limitations that; "The identity management process of 
claim 11, wherein 

pre-enrolling employs at least one of 
the Internet, 
mail service, and 
personal appearance.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet, whereas inclusive of SSL, IPSec (the WEB secure 
communications aspects), etc.,) and personal pre-enrolling via client workstations, clearly 
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encompasses the claimed limitations as broadly interpreted by the examiner.) suggest such 
limitations. 

And further as per claim 22, this claim is the embodied software claim for the method 
claim 12 above, and is rejected for the same reasons provided for the claim 12 rejection; "The 
computer program of claim 21, wherein 

pre-enrolling employs at least one of 
the Internet, 
mail service, and 
personal appearance.". 

13. Claim 13 additionally recites the limitations that; "The identity management process of 
claim 1 1, further comprising 

submitting biometric data for 

identification purposes.". 
The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network, and personal pre-enrolling via client workstations submission of biometric 
data, clearly encompasses the claimed limitations as broadly interpreted by the examiner.) 
suggest such limitations. 
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And further as per claim 23, this claim is the embodied software claim for the method 
claim 13 above, and is rejected for the same reasons provided for the claim 13 rejection; "The 
computer program of claim 21, further comprising 

submitting biometric data.". 

14. Claim 17 additionally recites the limitations that; "The identity management process of 
claim 14, wherein 

checking-in includes 

obtaining the identity information queried from the core system 
that includes at least one of 
a facial image, 
an iris scan, 
hand geometry, 
a fingerprint, and 
the like.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network, and checking-in via client workstations submission of biometric (i.e., 
fingerprint, facial) data, clearly encompasses the claimed limitations as broadly interpreted by 
the examiner.) suggest such limitations. 
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15. Claim 1 8 additionally recites the limitations that; "The identity management process of 
claim 15, wherein 

conducting security checks includes 

obtaining identity information queried from the core system 
that includes at least one of 
a facial image, 
an iris scan, 
hand geometry, 
a fingerprint, and 
the like.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network, and conducting security checks via client workstations submission of 
biometric (i.e., fingerprint, facial) data, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.) suggest such limitations. 



16. Claim 19 additionally recites the limitations that; "The identity management process of 
claim 16, wherein 

identity verification includes 

obtaining identity information queried from the core system 
includes at least one of 
a facial image, 
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an iris scan, 
hand geometry, 
a fingerprint, and 
the like.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network, and identity verification via client workstations submission of biometric 
(i.e., fingerprint, facial) data, clearly encompasses the claimed limitations as broadly interpreted 
by the examiner.) suggest such limitations. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

17. Claims 6, 8, 10, 16, 20 and 26 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over McCoy et al, U.S. Patent No. 6,018,739, and further in view of below. 

It is noted that McCoy et al does not disclose the distributed biometric identification 
system utilized in the transportation environment per se. However, the examiner asserts that it 
would have been obvious to one ordinary skill in the art at the time the invention was made for 
the INS to use the McCoy system as part of a transportation access control mechanism, since 
such control of access to transportation means/boarding, etc., by individuals under identification 
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by the INS would be obvious. A recitation directed to the manner in which a claimed apparatus is 
intended to be used does not distinguish the claimed apparatus from the prior art if prior art has 
the capability to do so (See MPEP 21 14 and Ex Parte Masham, 2 USPQ2d 1647 (1987). 

1 8. Claim 6 additionally recites the limitations that; "The identity management system 
described in claim 1, further comprising 
a boarding workstation 

to authorize an individual 

to board a means of transportation based on 
verification of the identity and 
travel information regarding the individual, 

wherein 

the core system is electronically connected to 
the boarding workstation.". 
The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (boarding workstation 
inclusive of authorization of individual access rights with respect to boarding, etc.,), clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.) suggest such 
limitations. 



Application/Control Number: 10/665,419 Page 17 

Art Unit: 2136 

And further as per claim 16, this claim is the method claim for the apparatus (system) 
claim 6 above, and is rejected for the same reasons provided for the claim 6 rejection; "The 
identity management process of claim 1 1 , further comprising 
identity verification 

prior to boarding a means of transportation 
by at least one of 

scanning the identification token of 

the individual, 
verifying biometric data of 

the individual and 
querying the core system for 
identity and 
travel information.". 



And further as per claim 26, this claim is the embodied software claim for the apparatus 
(system) claim 6 above, and is rejected for the same reasons provided for the claim 6 rejection; 
"The computer program of claim 21, further comprising 
boarding onto the means of transportation by 
at least one of 

scanning the identity token of 

the individual, 
verifying biometric data of 
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the individual and 
querying the core system for 
identity and 
travel information.". 

19. Claim 8 additionally recites the limitations that; "The identity management system 
described in claim 6, wherein 

the core system is networked with 
the check-in workstation and 
the boarding workstation 

using 

a secure connection.". 

The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet, whereas inclusive of SSL, IPSec (the WEB secure 
communications aspects), etc.,), clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.) suggest such limitations. 

20. Claim 10 additionally recites the limitations that; "The identity management system 
described in claim 3, further comprising 

a boarding workstation 

to authorize an individual 
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to board a means of transportation based on 
verification of the identity and 
travel information regarding the individual, 

wherein 

the core system is electronically connected to 
the boarding workstation.". 
The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (boarding workstation 
inclusive of authorization of individual access rights with respect to boarding, etc.,), clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.) suggest such 
limitations. 

2 1 . Claim 20 additionally recites the limitations that; "The identity management process of 
claim 1 1 , wherein 

pre-enrolling, 

enrolling and 

vetting 

are performed in accord with 

an access control system of 

a transportation facility.". 
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The teachings of McCoy et al (Abstract, figures l-3t and associated descriptions, whereas the 
distributed biometric identification system inclusive of various workstations/client functions over 
a wide area network (i.e., the Internet), and more particularly, the workstation utilized as part of 
the identification and administrative database management system (boarding workstation 
inclusive of authorization of individual access rights with respect to boarding, etc.,), clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.) suggest such 
limitations. 
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Conclusion 



22. Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861, and whose 
unofficial Fax number is (571) 273-3861 and unofficial email is Ronald.baum@uspto.gov. The 
examiner can normally be reached Monday through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami, can be reached at (571) 272-4195. The Fax number for the 
organization where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, see http://pair-direct.uspto.gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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